cve/2018/CVE-2018-10363.md

### [CVE-2018-10363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10363)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

### POC

#### Reference
- https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e

#### Github
No PoCs found on GitHub currently.